X-Git-Url: https://git.openstreetmap.org./chef.git/blobdiff_plain/03304582f8cbbb14d634498f9c31636452cdf532..90e8109a883d6bbae266acf94a90b54526b3d443:/cookbooks/systemd/resources/service.rb diff --git a/cookbooks/systemd/resources/service.rb b/cookbooks/systemd/resources/service.rb index 39abc608e..4b53051d3 100644 --- a/cookbooks/systemd/resources/service.rb +++ b/cookbooks/systemd/resources/service.rb @@ -1,14 +1,14 @@ # -# Cookbook Name:: systemd +# Cookbook:: systemd # Resource:: systemd_service # -# Copyright 2016, OpenStreetMap Foundation +# Copyright:: 2016, OpenStreetMap Foundation # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. # You may obtain a copy of the License at # -# http://www.apache.org/licenses/LICENSE-2.0 +# https://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, @@ -17,58 +17,141 @@ # limitations under the License. # +unified_mode true + default_action :create -property :name, String -property :description, String, :required => true +property :service, String, :name_property => true +property :dropin, String +property :description, String +property :condition_path_exists, [String, Array] +property :condition_path_exists_glob, [String, Array] property :after, [String, Array] -property :type, String, - :default => "simple", - :is => %w(simple forking oneshot dbus notify idle) -property :limit_nofile, Fixnum +property :conflicts, [String, Array] +property :wants, [String, Array] +property :type, String, :is => %w[simple forking oneshot dbus notify idle] +property :limit_nofile, Integer +property :limit_as, [Integer, String] +property :limit_cpu, [Integer, String] +property :memory_low, [Integer, String] +property :memory_high, [Integer, String] +property :memory_max, [Integer, String] property :environment, Hash, :default => {} -property :environment_file, String +property :environment_file, [String, Hash] property :user, String property :group, String +property :working_directory, String property :exec_start_pre, String -property :exec_start, String, :required => true +property :exec_start, String property :exec_start_post, String property :exec_stop, String property :exec_reload, String +property :runtime_directory, String +property :runtime_directory_mode, Integer +property :runtime_max_sec, Integer +property :standard_input, String, + :is => %w[null tty tty-force tty-fail socket] +property :standard_output, String, + :is => %w[inherit null tty journal syslog kmsg journal+console syslog+console kmsg+console socket] +property :standard_error, String, + :is => %w[inherit null tty journal syslog kmsg journal+console syslog+console kmsg+console socket] +property :success_exit_status, [Integer, String, Array] property :restart, String, - :is => %w(on-success on-failure on-abnormal on-watchdog on-abort always) -property :timeout_sec, Fixnum + :is => %w[on-success on-failure on-abnormal on-watchdog on-abort always] +property :private_tmp, [true, false] +property :private_devices, [true, false] +property :private_network, [true, false] +property :protect_system, [TrueClass, FalseClass, String] +property :protect_home, [TrueClass, FalseClass, String] +property :read_write_paths, [String, Array] +property :read_only_paths, [String, Array] +property :inaccessible_paths, [String, Array] +property :restrict_address_families, [String, Array] +property :no_new_privileges, [true, false] +property :tasks_max, Integer +property :timeout_sec, Integer property :pid_file, String +property :nice, Integer +property :io_scheduling_class, [Integer, String] +property :io_scheduling_priority, Integer +property :kill_mode, String, + :is => %w[control-group process mixed none] action :create do - template "/etc/systemd/system/#{name}.service" do + service_variables = new_resource.to_hash + + unless new_resource.dropin + service_variables[:type] ||= "simple" + end + + if new_resource.environment_file.is_a?(Hash) + template "/etc/default/#{new_resource.service}" do + cookbook "systemd" + source "environment.erb" + owner "root" + group "root" + mode "640" + variables :environment => new_resource.environment_file + end + + service_variables[:environment_file] = "/etc/default/#{new_resource.service}" + end + + if new_resource.dropin + directory dropin_directory do + owner "root" + group "root" + mode "755" + end + end + + template config_name do cookbook "systemd" source "service.erb" owner "root" group "root" - mode 0644 - variables new_resource.to_hash + mode "644" + variables service_variables + notifies :run, "execute[systemctl-reload]" end - execute "systemctl-reload-#{name}.service" do + execute "systemctl-reload" do action :nothing command "systemctl daemon-reload" user "root" group "root" - subscribes :run, "template[/etc/systemd/system/#{name}.service]" end end action :delete do - file "/etc/systemd/system/#{name}.service" do + file "/etc/default/#{new_resource.service}" do action :delete + only_if { new_resource.environment_file.is_a?(Hash) } end - execute "systemctl-reload-#{name}.service" do + file config_name do + action :delete + notifies :run, "execute[systemctl-reload]" + end + + execute "systemctl-reload" do action :nothing command "systemctl daemon-reload" user "root" group "root" - subscribes :run, "file[/etc/systemd/system/#{name}.service]" + end +end + +action_class do + def dropin_directory + "/etc/systemd/system/#{new_resource.service}.service.d" + end + + def config_name + if new_resource.dropin + "#{dropin_directory}/#{new_resource.dropin}.conf" + else + "/etc/systemd/system/#{new_resource.service}.service" + end end end